Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
File: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft (raw, json)
Hash identifier: /+JQZWlOsvlo8AeTmWE19P9OgrEjguH0ZJhTNu2UH7I=
Subject key identifier: 5F:F2:29:D9:71:CC:9D:99:48:99:60:50:31:A9:0E:85:F8:B4:D8:71
Authority key identifier: 0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
Certificate issuer: /CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Certificate serial: 019D37C0664F2EE664FC4BF80FDC5F2D7D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
Manifest number: 157D
Signing time: Sun 29 Mar 2026 04:00:49 +0000
Manifest this update: Sun 29 Mar 2026 04:00:49 +0000
Manifest next update: Mon 30 Mar 2026 04:00:49 +0000
Files and hashes: 1: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl (hash: wopQJ5qn/6253o2CoMY7kbzFsPuBmCIiDMjwYNK6l+o=)
2: ZJDmPvzDE__eYUkVLrAmHcTbK2E.roa (hash: mZslKl2yoouF0x/HaqlGPF55VMLSQDizBAGrzjr6tuY=)
3: bipK7OOAYGpHrw7S5fmJoRnxSxQ.roa (hash: rrZJyfnTOVyxttfXNIKKI76uVK5IaaBMN4ZDEVeQY94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:66:4f:2e:e6:64:fc:4b:f8:0f:dc:5f:2d:7d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Validity
Not Before: Mar 29 04:00:49 2026 GMT
Not After : Mar 30 04:00:49 2026 GMT
Subject: CN=5ff229d971cc9d994899605031a90e85f8b4d871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7f:50:d4:cf:87:b0:db:ab:e4:28:df:d4:6a:
45:2f:81:8c:2e:91:c4:1f:13:11:8e:df:ed:66:b9:
15:af:ad:69:af:97:f4:b8:52:9b:00:e1:3a:2a:24:
78:db:22:b1:7d:2a:01:1c:57:b6:a1:0e:1f:ea:c8:
1b:f6:5f:fd:48:de:2e:3f:ce:2e:00:1f:31:fa:d0:
56:79:52:d3:f7:43:04:da:df:56:a3:42:3f:23:af:
63:79:e7:a3:02:37:c7:8b:e9:39:b0:02:e2:6f:8a:
18:60:f4:48:ed:60:bc:0c:d0:4b:d6:c6:77:3d:34:
97:13:f8:33:36:10:5c:75:d6:0d:c4:04:62:b7:84:
74:a6:b8:6b:59:13:49:e0:83:f2:55:4f:be:ad:8a:
38:74:82:d1:98:8a:7d:70:7a:57:45:28:f6:88:d0:
85:96:d1:9c:ce:a4:d5:5f:3a:92:72:d1:9e:57:89:
6c:51:71:47:f3:4f:dc:af:0c:45:b3:bb:b6:77:1d:
c4:74:1e:2d:51:96:e9:b7:7f:a6:61:c2:2c:23:71:
77:18:0d:9e:9a:4a:0e:d8:dc:5a:82:62:a1:a7:37:
79:ef:03:b5:f2:ef:77:19:33:58:bf:ca:c6:3f:f0:
8e:f8:bb:d6:05:d4:1d:5f:d9:37:35:59:69:4a:24:
3f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F2:29:D9:71:CC:9D:99:48:99:60:50:31:A9:0E:85:F8:B4:D8:71
X509v3 Authority Key Identifier:
keyid:0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b7:69:98:7b:07:2e:18:07:66:47:80:91:ba:e9:f3:f9:62:
76:62:bc:43:3c:3c:a5:ca:94:c5:4e:74:7a:5c:fb:45:11:fa:
09:b6:88:ec:1e:72:c3:66:67:b1:8c:21:9a:fe:68:eb:9a:10:
87:9a:78:e5:6f:1f:c4:6d:ae:25:72:92:f4:03:e6:68:c8:12:
73:24:82:ca:77:6d:14:1e:59:b7:10:bf:19:47:b3:54:6d:e6:
d8:81:4e:97:b3:8f:96:e8:98:9c:0e:2c:d3:3d:b8:68:98:cd:
cb:9c:0c:50:63:f0:c3:83:98:27:69:92:3b:75:73:85:e5:ef:
99:c5:b0:27:2b:88:85:a9:8f:8d:d4:a5:e9:38:f6:d4:0c:34:
2a:55:4f:fc:0a:1f:14:ff:a9:bb:19:3c:ad:97:f4:ac:9e:27:
f1:54:64:c8:61:e8:c4:e2:45:53:8c:b7:fb:8e:95:76:df:6d:
c7:d8:13:84:1f:72:82:c3:74:cf:de:ce:b0:fb:0c:71:20:1c:
f4:f1:b1:62:f5:bc:8f:a7:17:06:d2:bb:50:84:76:2d:c2:95:
ea:40:de:b7:2e:e9:ab:e8:b0:e6:ad:3b:08:94:a6:d5:c0:7d:
41:1d:b4:85:93:6a:b5:1f:cc:d6:2e:9d:60:d3:e0:63:b7:b3:
8a:e3:66:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:59:19 2026 by rpki-client